Cisco C220 M3, Настройка

Страница: 6 / 10

Dirty Interface Outbout
Note Action Port Protocol Destination Source
Allow outbound traffic from
samples. (To get accurate
results it is required that
malware be allowed to contact
its command and control
server using whatever port and
protocol it is designed to use.) Allow ANY ANY Internet Dirty
Interface
Dirty Interface Inbound
Note Action Port Protocol Destination Source
Deny all incoming
connections. Deny ANY ANY Dirty Internet ANY
Clean Interface Outbound
Note Action Port Protocol Destination Source
The appliance uses the clean
interface to initiate SMTP
connections to the configured
mail server. Allow 25 TCP SMTP Servers Clean
Interface
Clean Interface Outbound (Optional)
Note Action Port Protocol Destination Source
Optional, only required if
Clean DNS is configured. Allow 53 TCP/UDP Corporate DNS
Server Clean
Interface
Optional, only required if
AMP for Endpoints Private
Cloud integration is used. Allow 443 TCP AMP Private Cloud Clean
Interface
Allow connectivity to server
designated to receive Syslog
messages and Threat Grid
notifications. Allow 514 UDP Syslog Servers Clean
Interface
Optional, only required if
LDAP is configured. Allow 389 TCP/UDP LDAP Servers Clean
Interface
Optional, only required if
LDAP is configured. Allow 636 TCP LDAP Servers Cean
Interface
Server Setup
6
Server Setup
Firewall Rules